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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 
Listing of Claims: 

1 . (Currently Amended) A method of managing security keys generated from an 
ancestral hierarchy and used issued by or on behalf of a service provider in order to provide 
selective access to provision of a service, wherein invalidation of a key necessitates 
reconfiguration of each other key within the hierarchy to the extent another key and an 
invalidated key share common ancestry, the method comprising the steps of: 

defining at least two groups of users of the service to whom keys have been issued ; 
allocating within the hierarchy a distinct domain for each group of users; and 
issuing keys to users from domains within the hierarchy upon the basis of their 
grouping. 

2. (Original) A method according to claim 1 wherein the at least two groups of users are 
defined upon the basis of a predetermined policy which provides that users are grouped 
according to their perceived value to a provider of the service. 

3. (Original) A method according to claim 2 wherein a first user group having the 
highest perceived value to the provider are allocated keys from a first domain, and wherein 
keys from the first domain share fewer ancestors with keys from other domains than said keys 
from other domains share with each other. 

4. (Original) A method according to claim 3 wherein keys from the first domain share 
only one ancestor with said keys from other domains. 

5. (Original) A method according to claim 1 wherein the ancestral hierarchy has a 
binary tree architecture. 

6. (Original) A method according to claim 1 wherein the at least two groups of users are 
defined upon the basis of a predetermined policy which provides that users are grouped 
according to a perceived susceptibility of them ceasing to require the service, and a first user 
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group having the highest perceived susceptibility are allocated keys from a first domain, and 
wherein keys from the first domain share fewer ancestors with keys from other domains than 
said keys from other domains share with each other. 

7. (Original) A method according to claim 6 wherein keys from the first domain share 
only one ancestor with said keys from other domains. 

8. (Currently Amended) A method according to claim 1 wherein varying levels of 
service are available and a group of users of a low-service level are allocated plac e bo dummy 
keys providing no security, thereby to obviate a need to reconfigure other user's keys upon 
their invalidation. 

9. (Original) A method according to claim 8 wherein the service is a dynamic service 
and its value is ephemeral and based upon its contemporaneous nature. 

10. (Currently Amended) A method of managing security key distribution to a plurality 
of users of a service comprising the steps of: 

defining levels of service provision; 

allocating keys to users which are indicative to a service provider of the level of 
service to which they are entitled; and 

for at least one level of service provision, allocating plac e bo dummy keys which do 
not provide security for the provision of the service. 

1 1 . (Currently Amended) A method according to claim 10 wherein the placebo keys 
operate in such a manner that a user is not able to perceive a difference between a functioning 
security key and a placebo dummy key. 

12. (Original) A method according to claim 10 wherein the service is dynamic and its 
value is ephemeral and based upon its contemporaneous nature. 

13. (Currently Amended) A computing entity adapted to manage distribution of security 
keys keys generated from an ancestral hierarchy and used issued by or on behalf of a service 
provider in order to provide selective access to provision of a service, wherein invalidation of 
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a key necessitates reconfiguration of each other key within the hierarchy to the extent another 
key and an invalidated key share common ancestry, the entity being adapted to: 

define at least two groups of users of the service to whom keys hav e be e n issu e d ; 
allocate within the hierarchy a distinct domain for each group of users; and 
issue keys to users from domains within the hierarchy upon the basis of their 
grouping. 

14. (Currently Amended) A computing entity adapted to manage security key distribution 
to a plurality of users of a service by: 

defining levels of service provision; 

allocating keys to users which are indicative to a service provider of the level of 
service to which they are entitled; and 

for at least one level of service provision, allocating placebo dummy keys which do 
not provide security for the provision of the service. 
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